ownCloud disclosed a bug submitted by lukasreschke: https://hackerone.com/reports/1838674 – Bounty: $250 [Source]